events-peng[.]fun

This domain, events-peng.fun, is identified as a generic phishing threat specializing in cryptocurrency credential harvesting. Analysis indicates it mimics legitimate crypto event or promotional pages, likely deploying fake login portals or wallet drainer scripts to extract private keys or seed phrases. No specific brand impersonation has been confirmed, but the infrastructure aligns with known phishing kits targeting decentralized finance (DeFi) users and wallet holders. Technical indicators reveal the domain was registered on March 28, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious domains. It resolves to the IP address 188.114.96.3, which may host additional phishing or malware distribution endpoints. VirusTotal reports 8 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on three security blocklists and is referenced in one threat intelligence pulse on AlienVault OTX. Detection by MetaMask, PhishDestroy, and SEAL further corroborates its role in crypto-focused phishing campaigns. As of the latest assessment, events-peng.fun has been taken offline, likely in response to abuse reports or automated takedown mechanisms. However, residual risk persists due to the transient nature of such domains; threat actors may re-deploy the same infrastructure under a new domain or IP. Users who interacted with the domain are advised to revoke any connected wallet permissions, monitor for unauthorized transactions, and verify the legitimacy of all crypto-related communications. Network administrators should block the domain and its associated IP at the perimeter to prevent potential lateral movement or secondary infections.